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This mvendon relates to portable wn:iputlti|g devices vdth'xion-voladle (e.g.£la8h) memoty 
drives that are used to boot the device to a ftmctionfll GUI ^pcflpbiicajl user intcr&cc) — Lc. 
load ike necessary flies for the d&rice to display the device GUI BO that the device is 
oper^doml by ft user* 



DESCRIPTION OF THE PRIOR ART 

Many portable computing devices^ such as Smartphone^, use fiome {oxm of Hash OOO- 
volatile maw>ty ftw mterrjuaJ data storfige that is required to boot up to a funcdona). device 
IS GUI ^.e. to n functional scatse that include the geaphlcal uger ixit)ej:face)* XlD many cases, this 
Is the C: drive 

There are two possible iype« of Ftosh flfiemosy; NOR flJid NAND. Each has its own 
limitations and quirks. But the problems are essentially the same: 

a) Flash wears out - despite attempts at Vcac levelUng** there is always die possibility 
20 that a part of die Flash that contained data will be foixod to have feijled when that data 

is required. 

b) The batt}ecy charge may drop below the minimum required t30 run die device while 
data is being wtitten to the Flash and it caxwot necessarily be assumed that there wiB 
be enough space battery power to fuUy complete the write. 

25 c) It is more Ukely that the battery will be removed from a mobile phone while it is 
switched on than wldi a PDA. For example, many mobile phones require due battery 
te be removed to get at the SIM card mi it cantiot be assunwid thut the uso: will ton 
die phone off before removing the battery. 

d) There is a limit to how much protection can be added to the content of the Flash. 
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Tbete is always going to be a trade-off between the degcee of protection and the time 
end data ovcdicad required. 

c) Using Flash 33 a xnediiw c^n involve long-jwvvng cleanup opcir&dona, wWch we i3D;iy 
prefer to abandon when the phone la switched off> rather than wait for them to 
5 condnujc. 

f) Glitches power or data hw glitches, mainly during power up or down, can 
occaslonidly a Flash. 

There could be defect? in the code that implementa protection of the data. This 
pos^biUty should not be Ignored. 

10 h) One other point worth bearing in mind is the posBibllity of malicious code (viwscs and 
the like) deliberately corrupting die dnve. 



Yet it 18 necessary to have a working C: drive in order to scart cnou^ code for the device to 
do anylhiDg useful There are two conventional approaches to solving this: 

15 redesign all the code so thai is able to run without a C: drive, or 

b) if the C; drive is corrupt, automatically reformat It. 



Lcv Drive SvKp 
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SUMMARY OF THE PRESENT INVENTION 

In a first aspect of the invention, there a9 a portable i;on)py1dng device, in ^ch an internal 
non-Yolafjle mcn^xy drive th^t is used to boot vo a functional device GUI la automadcaUy 
S swapped with a tempomy lUVM ddv^ if the internal non-voktUe mcmoty ddve la &und to 
be conupced. 

This is much eagjei: and qiucka' to Jryipleijnejit than redesigning dl the code to be abk to 
withont an internal non-volatilc memory, on the C: drlve^ and also avoids the need to have a 

10 lot of CTnxa orxor handling fallback conditions wlthijQ. appUcadont?. I^lcally it also 
means that applications can condnue tx> offer much of ihelr normal fonctioiiafity diat would 
not be possible without a C: drive. It is also much more acceptable to cnd-wers than 
automaticaUy rcfotmatdng a cotrupt C? drive since ths^t process would lead to ihe loss of 
potentially recoverable user data- The non^volatile memory is typically Flash mcmoty, but 

15 the principle of the present invention can be applied to any kind of non-volatile memory that 
could become corrupted such as ceprora, hatd drives or fixture non-volatile memory 
products. 

A RAM drive is not convendonaDy used at all in the boot up of portable compwtiog devices 
20 that use Hwh memory fox data storsge. 

Default configuration ates tmy be automatically copied to the RAM drive. These may, for 
example, allow at least exnexgency voice calls to be made. Higher levcb of function^ty arc 

also possible. A RAM drive is a portion of device RAM that provides the same data storage 
25 capabilities as die Flash memory but is volatile. It nges part of the devire RAM to store the 
£9cs and data needed to boot the device to a GUI that is at least partly fuocdonaL 

Further, the corrupt drive may be autotxiatically moved m a dl£Ferent drive letter to allow 
subsequent refoimacting. A user notification asIoDg if reformatting should take place may 
30 tiacft be displayed 
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Other display messages may include the following: 

• BuecrnotificadonthatthctcmporBxydjdvciBinuec; 
■ a user nodficadon that save opdona are disabled: 

• n user nodficadon thar kivc opdons arc not available; 

• a user option which, if selected, initiates an attempt to extract data from liie corrupt 
intctnal non-volatile memory dwrc 



10 A second aspect of the invention is a m^A^od of enabling a poflabk cowputiog device to 
boot to a functional device GUI when an internal non-volatile memory drive that is normally 
used to boot up from is found to be cormpted, comprising the step oi autwiaticaJly 
BVTapping the cormpt non-vojadle memory drive wUSa a temporary RAM t3»ve, 

15 A third aspect is operating system software, for a portable computing device comprising an 
internal non-volatile memory drive thai is aotmally used to boot up the device to a 
foncdonal GUI. in which tiae operating system software automaticaUy swaps die non-volatile 
memoiy drive with a tempoxaiy RAM drive if the non-voladle memory drivels found to be 
coctuptcd. 

70 
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DETAILED DBSdUPTIOK 

Th& invention will T?e deeodbcd with xefbcewce to «i Jmplcjoocntadon wing the SymWanOS 
5 fiom Symbian limited of London, United KJoedom. A SymbianOS based devfce ahvays has 
a C: diivc which Is the intcnml tcad/writc diivc^ and the system cannot boot to a fimctional 
smartphone GUI without a usable C: diive. The C: diivc is normally Haah-based which 
• means diat there is always die poBsibBily of k becoming cottupL This Invendon emdsages a 
method of jcepjiicing a cowjpt G drive witib a tewposwy RAM drive so that a SymbianOS 
10 deviccxcmaia^imbleiatheeveiitofa&uluteof tShcCtdiiro. 



Overview 

The proccdvKC is this: 

a) Early in boot check whether tOie C: dsiwe is cocwpt Cc^wdy how this is doac wjU be 
discixssedlflte^ 

15 b) If the drive ia corrupt it is replaced with a RAM drive, possibly aUo creating some defeult 
files oa it CThese defeult files may be oeated ptogrammaticaliy or may be copied &om 
tempbses held elscwhoc in the ROM of the device^ 

c) The comipt drive » moved i» a different drive lettej: so it can stlU be accessed to xefiwraat 
it (and possibly also attempt to esEtract any fflea that may sdll be accesriWe.) 
20 d) The GUI detect chat the C: drive has been replaced wiJh a RAM drive and wiU at least 
infozm liic user of t^ic situadon. 

What happens next can be catrfiguxed to the device manofactuier's requirements. The usct 
may have the options to dtbct tefoKmat Ae drive ox return the device to a service centre. A 
mote nsct-ficlcndly approach would be to allow the user to at least call emergency numbers. 
25 Depending on the foncrionality ptovided by die device, it might be poSfi.1blc fot it to xctmin 
latgely usable as normal, though of course any data saved wiU bc lost when the device Js 
nimed oft so either save opdons should be disabled from the GUI or the user should be 
^tmcncd tibat an; newly created data will be lost. 




When is a d«iv€ "corrupt"? 

Wfi will consider here vhat is meant by *'com3pt" in the context of the prcBcnt iovcation. 
Htst, the dm m the file system can be divided into two parts - user data and metadata. User 
data is the content of files. MeiadaiR is the Informalioni wscd internally by flic file system to 
5 record its state. If ihe user data is corrupt but the metadata is not then technically thx? file 
ffff&m is xwot coxxupt because it still know what state it Is in. Realistically ihough it is unUkdy 
to be of any use in diis condldon. It Is also possible that the jEHc system is not totsHy coroipt 
- M an cstauiple Syiyibian's UPPS file system win enter read-only mode if it is unable to 
satisfactorily determine its state but cadstibag ^tota is still Ufedy to be vsBd, 
■ 10 Thcrcfoic the lll^tdy fflttwrc eases arc: 

a) Drive is totally coxmpt^ existlfig data cannot be read and new data cannot be written. 

b) Some or all existing user data is comapt bw mei»data Is valid, so it is still possible to 
creiace and write to new files. 

c) Sotne or all cKiering user data Is valid bur metadata is ambiguous^ truncated or in some 
IS way damaged; in this case probably at least soucie of the existajjg data can sriB be accessed but 

any attempt to write new data could make tilings worse and may ejjd up in case (a) . 

d) Drive is read only - Ae same as (c) except that making the drive read-only enforces "no 
new data". 

In pracdce It is unlikely diat the device wiU be &blc to operate in any of these situadons. It 
20 will want to read exlsdng files, which be corrupt, and very liltdy it will also want to write 
new data, Wliamver cbndirion the fflc system is in, «n call tl3u:m «0J "cojrropt" with 
reference to the present invicotion. 

How to dcitcct coemption 

There ate two methods - if the file system perfoons some sort of integrity scan vrfien it is 
25 mounmd then if die scan fails the mount should also feil with an error indicadng drive 
corrupdori. Altemarivdy some sort of scan of the fdc system could be invoked to dctetminc 
its integrity. A spot-check on the vplidity of fa.es Jmown to be essential for the correct 
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it^ Drive Swup 



opcwwioa of the device is another mcdiod » detetmine whether the drive Is cotnipc. How 
cotn^don should be detected ia tea% outside the scope of iWs docuweut doce it dcpeods 
. CO ihc tgfpc of flic systcnn, the dcgscc of Thoroughness tcqukcd, dxe dme available, and what 
files fixe critical to the system. 

5 Drive swapping 

The trwappJng of ihe corrupt drive vidth a RAM drive must happen eaxly Jn boot before any 
code that is dcpcndwat on the C: drive. The idesl place ia SyinbMwOS is E8TART. which is 
the first program tun afker ihe kernel and file server have been stazted. ESTAR.T will do 
• Bomethtog like this; 

10 

TVohimelnfo; 

Hat r = ThJ5.Vol\imc( info >; 
i£( r KEttNone } 
{ 

15 //drivcsay5hisok,BoJfwewaattoperiroimaftiidi«: 

// inicgrfty check do it now 
r^IntegriiyChedcO: 

} 

lf(zl=KEid4one) 

20 { 

UnmowntPrivcCQ; 

MountilUxnDnveOnCO; 
MountFlaahDztveOnAlTematcDriveO; 

CopyDe&uUracsToCO: 

25 ) 



At die end of dsis cither the C: drive will be the normal Flash drive, or it will be a tcOSpomy 
RAM drhre arid the Flash will have been moved to a different drive letcer. 
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GUI behaviour 

The GUI most be aUc to detect that tilic tcnnpoxaiy RAM drive is in use becaiMe it has to at 
least infbnn the user that the Flash is corxupt TTiU coq be do»e conveniently in SymUanC^ 
by checking the media type of die C: drive (RFk-DiItc fianction) which will be EMedlaRam 
if ^ ddves have been avmpped. 

The first thing the GUI want to do is to tcU die user that the drive is cottupt and also 
Qffer the opportunity to rcfornjat it - important data njay aUeady h»ve been bacJced np and 
the user la happy to jiut reformat. 

Fwtthct GUI hfljadllng will be partly dcpcnd«ix on the device aq>abi]jties and partly on die 
licensee tequiaanents. The device could be limited to just emcfgency calls. Ox it couJd be 
niortly ftunctloaal b« flw detccdon of die BAM drive could be used to diaable save opdons 
in programs (ag. calendars and address boolts) or warn the user that any data saved wiU be 
lost when die device is turned off. There could even be the opdon to attempt to extract 
InformMion feom die coccupt drive - tor the cases whew die drive is arill paidy accessible - 
attempting to find address books, calendars etc on the cormpt drive. 



1:1 Glossary 
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ROM 


A non-volatile, non-wrkeflble form of memory. This term can idso 
be used to apply to Flash .memory that is uacsd as a non-wd.teable 
memory 


RAM 


Random access memory 


Fla&b 


type of non-volatile stoxs^ 


NOR 


typeofFliasK 


NAND 


type of Flash 


LFFS 


Symtu'an file system for use on NOR Flash 


GUI 


Or&phical User IntecEaoe 
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. . . 1 : . . . . I . 


rJL/A 


Pcirtatile (m TPdSonan Diritsil Assistant fi.e. handheld computaer or 
psdmtop) 


SIM 


^iil^nnn^pr Identitv Module, used in GSjM ohcncs 


BstOfC 


In SyinbianOS ?.» the program started Immedlarely after the file 
server 


Ft)e serm 


In SymblattOS a program that provides basic file services to 
applications 


RAM Drive 


A secdon of the device ixiain RAM used as a volatile data sttsxage 
medium in the form of a file sys^m 




CLAIMS 

1. A poctfvble compwtiflfi device, m which Internal non-volatile memoxy drive that Is 
5 uBcd to boot to A fiioetdooal device GUI is amomadcsdly swapped with & tempomiy RAM 

ddve if dae internal non-voladle memory drive is foimd to be coxcoptod* 

2. Hife device of Claim 1 io which the non-volaiile mcoaoxy Is « flash maooty, 

10 3. Tha device of Chim 1 in which the tcmpotaxy RAM drive allows at teast: owej^cy 
voice calls to be tnadje. 

4. Hut device of ObOm 1 io which defimJt configuration files ate automadcally copied to 
the RAM drive. 

IS 

5. The devicle of Claim 1 in wWch the co«npt dthrc is aTJtt>matica% moved to a 
diSesenc drive kncx to allow svbscqucnt reformatting, 

6. The device of Cklm I which displays a wset notificatloa asking if xefotmatting 
20 shovdd take place. 

7. The device of Claini 1 which displays a vaeit notification that dac tempotasy RAM 
drive is In use. 

25 

8. The device of aaim 1 which displays a user notification tlu^t save oprions ate 
disabled, 

9. The device oC Qaim t which displays a user notificarion that save options arc not 
30 available. 
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10. The device of Oaim I which dispUyii a user option wWdi, if sdecled, inidateB no to 
Mvxnpt to cantact daw fioxn the cooropt liateir»l flwh mcmoty drive. 

5 11. TiwdcvkcofCtoltovHWchtheioi^ 
cozru^rtsd if aay of the following appfy: 

(s) odstlogdMa cannot b«te»d: 

(b) (WW d»ta c^not be written; 

(c) user data is conopt but mctedatift fe oot cottupft 
10 (<I) user data is not cotcupt but metfldn** ie cowupi; 

(e) it is in a sead-onty afiats. 

12. A method of enabliog ft poriabte compudng device to boot to « funcdonfll device 
GUI when an internal non-volatile memory drive that is normally used to boot up &om la 

15 found to be corrupted, comprising the step of automaricdly swapping the coaupt non- 
volsdte memory ddvc widi a cwapotwcy RAM drive. 

13. HiB tncdiod of CWm 12 In-whicTafte non-volatifc roeaooKy is aflash memory. 



20 



14. The method of Claim 12 in which the tewpoj»ty KAM drive aUows at least 
cmo^gcxicy voice calls to be made, 

15. The method of CWm 12 in wWch defeult coniiguration files are automadcally copied 
toAcRAMdtivB. 

16. Ttie method of Claim 12 » which the corrupt drive is automatically moved to a 
di£6fttent drive letter to allow subsequent lefbimatling. 

17. llje method of Claim 12 in which the device displays a user notiScation asking if 
30 reforaiatdng should take pdace. 
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18. The method of Claim 12 in which the device dispkys « user ftotificalaoa that the 
tempor^cy RAM dove h in 

5 19- The method of CWm 12 in vMdi ihc device dispkys a user aoiafic^itlon diat save 
opdoflS flxc disabled. 

20. The mdhod of Ciaixn 12 in which the device displays a wcr notificadon dial save 
optiona are not available. 

10 

21. The method of CUdm 12 ia which the device displays a user option which, if 
«clccw4 Jjoiriaics an to attempt to extract data from the comipt drive, 

22. Tlie method of Qaim 12 In which die internal uon-voJatilc memory drive is found to 
15 be corrupted if any of Ac following apply: 

<a) ejeistiog data cannot be read; 

(b) new data cannot be written; 

(c) user data is corrupt but metadata la not corrupt; 

(d) user data is not comipt but metadata is cQprupt; 
20 (c) it is in a rcsid-onJy st^tc. 

23. Opctadng ayatctaa software, for d poitaWc coinpiiting d^^vjcc coajpxioing an intccyiril 

non-volatllc memory drive that is normally used to boot up the device to ci functional GUI, 
in whidi the operating system software automatixjally pwaps the non-VoUdle n?.emory drive 
25 with a temporary RAM drive if the noa-voJatilc memory diivc is found to be cormpceA 




AbBttoct 



A PORTABUB COMPUTING DEVICE WITH A NON-VOLATILE MEMORY 
DRIVE 

A pottaWc compuritlig device^ in which ao Intemal non>-VDlatne memory drive dut is used to 
boot to a fiincdonal device GUI is autO0«ili«lly uwpped wiA » temppraEy RAM drive if die 
int«xaal non-vokrilc nucmoty dxivc is foood to te coKsupted. 

Tb.c non-votedJB xaemoty U typically Flash memory, but the principle of the present 
invendon can be applied to any kind o£ non-volarik xnemoiy that could bccmne conniptcd. 
A RAM drive is not conventionally used at all in die boot up of portable compudng devices 
that boot using fbah tncxnoxy. 

Defirolt conflgusudon files may be autox»adc«i% copied to the RAM drive These may» for 
cssuoapk, allow tx lewt cwejgeocy voice calls to be «nade. 
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